Gaffa

17.6K posts

Gaffa banner
Gaffa

Gaffa

@_Gaffa_

"You get what anybody gets - you get a lifetime". Kate Bush, Nerd/Geek culture, EVs and Renewables.

Wollongong, Australia Katılım Haziran 2012
302 Takip Edilen588 Takipçiler
Gaffa
Gaffa@_Gaffa_·
@TeslaAUNZ For those like me that purchased it outright +7 years ago on the promise of hardware upgrade as required I don’t expect my ability to transfer my purchase or Tesla to live up to the promise of hardware upgrade to ever end.
English
0
0
3
80
Tesla Australia & New Zealand
FSD Supervised outright purchase is ending in ANZ To take advantage, order by 31 March & take delivery by 30 June T&Cs apply
English
61
56
678
48.7K
Gaffa
Gaffa@_Gaffa_·
@13arm13arm I've been stupidly ill for the last two months. Simply can't eat. It's not a weight loss plan I would suggest to anyone, but in. that time I'm down +18kg.
English
0
0
0
22
Gaffa retweetledi
Aakash Gupta
Aakash Gupta@aakashgupta·
Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine. The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once. The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine. The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had. That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months. The attack chain is the part that gets worse every sentence. TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials. Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one. The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions. TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.” Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours. The companies deploying AI the fastest right now have the least visibility into what’s underneath it.
Andrej Karpathy@karpathy

Software horror: litellm PyPI supply chain attack. Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords. LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm. Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks. Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages. Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

English
292
2.3K
11K
2.6M
Tyler Green
Tyler Green@GreenTyler27·
Once you include transmission, backup, storage and reliability costs, the “cheap” narrative falls apart pretty quickly.
Tyler Green tweet media
English
45
65
287
3.4K
Gaffa
Gaffa@_Gaffa_·
@DunkenKBliths I've seen EV waste services trucks in other countries.
English
1
0
1
29
Gaffa
Gaffa@_Gaffa_·
That and remember different groups pay for our roads. Local councils pay for local roads. I pay my council fees and pay like everyone else for local road maintenance. State road infrastructure is the responsibility of the state and mostly paid for with vehicle registration fees, stamp duty, and general taxation. National highways are funded mostly by Federal money with some input from State depending on what’s hashed out during planning.
English
0
0
0
23
fsddoctortalks
fsddoctortalks@dochafees·
youtu.be/VU_ZfPBFGw0?si… Fuel excise in Australia is not some clean little pot of money that goes straight to fixing roads. The official parliamentary material is pretty clear — it mostly goes into general revenue, not directly into road maintenance. Governments may link parts of fuel-tax revenue to road programs, but that is not the same as saying fuel excise = road-maintenance fund. That’s why the “EVs don’t pay for roads” line is a lot shakier than people make out. Victoria tried a separate EV road-user tax, the High Court struck it down, and refunds had to be issued. #ElectricVehicles #EVs #FuelExcise #RoadTax #TransportPolicy #PublicPolicy #Australia #AusPol #EnergyPolicy #TaxReform @sydney_ev
YouTube video
YouTube
English
1
0
5
169
Gaffa
Gaffa@_Gaffa_·
@Peter_Fitz Don’t forget the continuous reduction in real cost of batteries. 2010 a battery was $1200 for each kWh 2025 that’s $108 per kWh 2035 projections are that could $15 per kWh These battery prices people have cottoned onto are from 2010’s
English
0
0
4
74
Peter FitzSimons
Peter FitzSimons@Peter_Fitz·
The problem will be what? Current projections are my battery will last for another decade or so, making it, say, 18 years. At current cost to replace, about $20K. Amortised, my battery cost = $1K a year, and they're also developing ways to rejig disused car batteries to solar.
DJ ☘️@damojonesz

@Peter_Fitz Wait until you have to change the batteries.

English
41
24
258
14.3K
Gaffa retweetledi
David Pocock
David Pocock@DavidPocock·
Truth in political advertising rules & Lobbying reform are both necessary if we are to have any hope of restoring trust in politics & and ensuring people feel genuinely represented. So why are the major parties putting self interest and vested interests ahead of the interests of the Australian people and our democracy? I have bills in the senate to implement both of these, in line with what I've been hearing from people in the ACT. @abcnews abc.net.au/news/2026-03-2…
English
55
190
596
7.5K
Gaffa retweetledi
Dr Monique Ryan MP
Dr Monique Ryan MP@Mon4Kooyong·
Australians are losing trust in government. They know that the major parties make decisions in their own best interests rather than those of the people they represent. They want lobbying reform and for us to close the revolving door between government and industry. My Clean Up Politics Act would do that; it's sitting before Parliament now. We could pass the legislation this week. The only thing standing between greater transparency in government, and Australians, is the major political parties. abc.net.au/news/2026-03-2…
English
282
174
586
17.1K
Gaffa retweetledi
David Pocock
David Pocock@DavidPocock·
Major parties happy to spend hundreds of billions on submarines they hope we'll get in the 2030s and 40s for national security reasons, but we haven't seen the same investments into fuel security. So 🇦🇺 is exposed to global price shocks when there’s conflict overseas. Investing more in electrification would cut costs and strengthen our resilience, but it has to be done in a way that benefits every household. abc.net.au/news/2026-03-2…
English
146
346
1.1K
16.6K
Gaffa
Gaffa@_Gaffa_·
@conocornelius @sydney_ev Here's a whole youtube channel from a trucking firm out of Germany that is entirely EV trucks shipping all over Europe (Turkey to Spain to England and up into the Netherlands) Explains ins and outs, pitfalls and benefits. @elektrotrucker" target="_blank" rel="nofollow noopener">youtube.com/@elektrotrucker
English
1
0
2
84
Cornelius OC
Cornelius OC@conocornelius·
@sydney_ev EV are 3 x the cost of an ICE truck. None are commercially viable without grants or subsidies. ARENA is providing this today but only to the bluechip companies who don't need the assistance. Access to sufficient energy for large scale charging at depots is also an issue
English
9
0
0
268
Sydney EV 🔋☀️
Sydney EV 🔋☀️@sydney_ev·
many argue that #EV trucks wont work for longer haul, even though some are now capable of 500Km or more at GVM. saying charge times are to long for the industry, reality is, Accountants will make the call, and if an EV truck can save them $5K in fuel per trip, it will happen.
English
78
31
270
5.4K
Gaffa retweetledi
The Halfway Post
The Halfway Post@HalfwayPost·
BREAKING: An extremely MAGA televangelist from Mississippi who claimed that God was using Donald Trump to start the Iran War so that the Biblical Apocalypse could begin and Rapture up all the Christians just got arrested for running a meth lab in the basement of his church.
English
902
10.1K
32.6K
634K
Fremen Jack
Fremen Jack@FremenJack·
@Govindtwtt A few possible outcomes: 1. AI is just a hype bubble that will collapse. 2. Universal income, founded by corporate taxes. 3. Neo-serfdom for all!
English
1
0
1
11
Govind
Govind@Govindtwtt·
Everyone says “AI will take all the jobs.” If that happens… how does this future actually work? No jobs → no income → no spending. So who buys things? Who pays rent? Who keeps the economy moving? What am I missing here?
English
3.1K
675
10.5K
910.5K
Gaffa
Gaffa@_Gaffa_·
I noticed one of the plans being presented to reduce fuel use is to limit speeds on freeways and highways. Should EV‘s be subject to speed limitation alongside ICE vehicles?
English
1
0
3
76
Gaffa
Gaffa@_Gaffa_·
We do need EV trained mechanics. EVs can go for years without issue, but all mechanical components and even some EV motors are subject to wear and tear. For example, all Tesla rear engines (pre 2017 I believe) will (not a matter of if) eventually develop a coolent leak into the sealed internals that should be just lubricant. That’ll rust and eat away the rotor and destroy it. If you take it to Tesla they’ll fix it by just replacing the motor ($5000 to $8000). But a competent EV mechanic can do it with a $100 part + time if caught before things get out of hand. We need to train up mechanics for EVs
English
0
0
1
58
Gaffa retweetledi
vittorio
vittorio@IterIntellectus·
this is art
vittorio tweet media
English
250
6.3K
43.3K
920K
Sydney EV 🔋☀️
Sydney EV 🔋☀️@sydney_ev·
I have noticed on X and Threads, the anti EV and anti renewable FUD is really cranked up now, the same old busted myths just repeated over and over... its almost like a fossil fuel industry is in crisis and desperate to keep petrol buying customers..
English
37
24
153
2.4K